| PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT |
| OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, |
| SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT |
| LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, |
| DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY |
| THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT |
| (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE |
| OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. |
| |
+-------------------------------------------------------------------------+
*/
require_once "include/session.php";
require_once "include/login_include.php";
if (isset($_POST["name"]) && isset($_POST["password"])) {
$login = new login($db);
$failed = $login->verify($_POST["name"], $_POST["password"]);
} else {
$failed = "";
$_POST["name"] = "";
}
//endif
if (isset($_SESSION["userinfo"])) {
goURL(DEFAULT_LOAD_PAGE);
}
$pageTitle = formatVariable(APPLICATION_NAME) . " Log in";
$phpbms->cssIncludes[] = "pages/login.css";
$phpbms->jsIncludes[] = "common/javascript/login.js";
$phpbms->showMenu = false;
$phpbms->showFooter = false;
include "header.php";
?>
echo "User does not exist";
} else {
$q = $login->getUserQuestion($_POST['name']);
echo "<option value=" . $q[0] . ">" . $q[1] . "</option>";
}
}
if (isset($_POST['name']) && isset($_POST['answer']) && !isset($_POST['password'])) {
$check = $login->getAnswer($_POST['name'], $_POST['answer']);
if (!$check) {
echo "Wrong answer";
} else {
echo "Correct";
}
}
if (isset($_POST['login'])) {
$check = $login->verify($_POST['name'], $_POST['password'], $_POST['answer']);
if (!$check) {
echo "Authentication failed";
} else {
session_start();
$_SESSION['lid'] = $login->getLoginID($_POST['name']);
echo "Access Granted";
}
}
if (isset($_POST['register'])) {
$check = $login->store($_POST['name'], $_POST['password'], $_POST['question'], $_POST['answer']);
if (!$check) {
echo "Registration failed";
} else {
session_start();
$_SESSION['lid'] = $login->getLoginID($_POST['name']);
